Privacy Policy

Website Visitors, Account Holders, Learners, Purchasers and Corporate Training Participants
NKO Training FZE
Effective date: 21 August 2026 | Version 1.0
Corporate detail Information
Legal entity NKO Training FZE
Trade Licence No. 4429525.01
Formation No. 4429525
Licensing authority Sharjah Publishing City Free Zone Authority
Registered address Business Centre, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates
Privacy contact booking@nkotraining.com
Telephone +971 52 401 1165
Privacy summary. NKO Training FZE is ordinarily the controller of personal data collected for its website, LMS, enrolments, Course delivery, assessments, certification, support, security and business administration. We collect only information reasonably required for the purposes described below and do not treat acceptance of website terms as unlimited consent. Privacy requests may be sent to booking@nkotraining.com. We may verify identity before acting on a request.

1. Who We Are and Scope

This Privacy Policy explains how NKO Training FZE collects, uses, discloses, stores and protects personal data in connection with the NKO Training website, learning management system, E-Learner Courses, Live Online Courses, In-Person Courses, Hybrid Courses, assessments, certificates, events, communities and related services.
NKO Training FZE is a Free Zone Establishment established under Trade Licence No. 4429525.01 and Formation No. 4429525, licensed by the Sharjah Publishing City Free Zone Authority, with its registered address at Business Centre, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates.
This Policy applies to website visitors, purchasers, Learners, prospective customers, corporate contacts, instructors and other individuals whose personal data we process. It should be read with our Terms of Service, Cookie Policy and any Course-specific privacy notice.

2. Our Data-Protection Roles

2.1 NKO Training as controller

NKO Training ordinarily acts as the data controller where it decides why and how personal data is processed for account registration, orders, payments, Course delivery, progress, attendance, assessments, certificates, support, security, marketing and business administration.

2.2 Processors and independent controllers

Learning-platform, cloud-hosting, payment, video-conferencing, email, analytics and support providers may process personal data on our behalf as processors under contractual obligations. Some providers may act as independent controllers for limited activities they determine themselves, such as payment compliance, fraud screening or their own account administration. Their notices apply to those independent activities.

2.3 Corporate Customers

Where an employer or other organisation sponsors training, it may act as an independent controller of the Learner information it provides to NKO Training and the training reports it receives. The corporate agreement and enrolment notice may contain additional information about those roles.

3. Personal Data We Collect

Category Examples
Identity and contact data Name, title, email address, telephone number, country, postal address and account identifiers.
Account and authentication data Username, encrypted or hashed credentials, verification status, account settings and login history.
Professional and organisation data Employer, role, industry, department, professional interests, sponsorship details and information relevant to Course eligibility.
Order and payment data Course selected, price, discounts, invoices, transaction status, payer details, billing information and limited payment references. Complete card details are ordinarily handled by payment providers.
Course and learning data Enrolments, progress, lesson activity, attendance, bookings, assessment responses, scores, feedback, completion, certificates and support history.
User Content and communications Assignments, messages, questions, discussion posts, files, complaints, survey responses and correspondence.
Technical and usage data IP address, browser, device, operating system, identifiers, access times, pages viewed, session activity, referral source, error logs and security events.
Marketing and preference data Communication preferences, consent records, campaign engagement, interests and unsubscribe status.
Audio, video and image data Course recordings, photographs, profile images or identity-verification material where separately notified and lawfully collected.
Sensitive data We do not intentionally request sensitive personal data unless necessary for a specific lawful purpose and appropriate safeguards are in place.

4. How We Collect Personal Data

We may collect personal data:
  • Directly from you when you browse, create an account, place an order, enrol, attend, submit work, contact support, complete a survey or communicate with us;
  • From a Corporate Customer, employer, sponsor, parent or guardian that registers or administers participation;
  • Automatically through the Platform, cookies, logs, security tools and analytics;
  • From payment, video-conferencing, identity, marketing or technology providers used to deliver the Services;
  • From instructors, coordinators and assessors who record attendance, progress, feedback or results; and
  • From public or professional sources where reasonably necessary for business-to-business contact, due diligence or verification and where permitted by law.

5. Why We Use Personal Data and Our Lawful Grounds

We process personal data only where we have a lawful ground under applicable data-protection law. Depending on the jurisdiction and circumstances, the ground may include consent, entering into or performing a contract, compliance with a legal obligation, protection of rights or safety, legitimate interests where permitted and not overridden, or establishment, exercise or defence of legal claims.
Purpose What it involves Typical lawful ground
Create and administer accounts Register users, verify contact details, authenticate access and maintain account settings. Contract performance; legitimate interests in administration and security; consent where required.
Process enrolments and payments Accept orders, issue invoices, process payments, apply discounts and manage refunds or disputes. Contract performance; legal obligations; legitimate interests in fraud prevention and financial administration.
Deliver Courses and support Provide content, schedule sessions, communicate Course information, respond to enquiries and provide support. Contract performance; legitimate interests in effective service delivery.
Monitor learning and issue certificates Track progress, attendance, assessment and completion; issue and verify certificates. Contract performance; legitimate interests in programme integrity and recordkeeping.
Protect content and systems Prevent account sharing, piracy, fraud, cyber incidents, misuse and assessment misconduct. Legitimate interests in protecting learners, systems, rights and revenue; legal obligations where applicable.
Corporate training administration Provide reports to an authorised employer or sponsor and manage allocated seats. Contract performance; legitimate interests; consent where required.
Legal and regulatory compliance Maintain tax and accounting records, respond to authorities, investigate complaints and enforce rights. Legal obligation; legal claims; legitimate interests in compliance and governance.
Improve the Services Analyse usage, quality, accessibility, performance and learner feedback, preferably using aggregated or de-identified data. Legitimate interests in improvement; consent for optional analytics where required.
Marketing Send relevant news, offers and Course information and measure campaign engagement. Consent where required; legitimate interests for permitted communications and suppression records.
Where we rely on consent, the request will be specific and separate where required, and consent may be withdrawn without affecting earlier lawful processing. Acceptance of the Terms of Service is not blanket consent to unrelated processing.

6. Corporate Customers and Sponsored Learners

Where a Corporate Customer purchases or sponsors training, we may receive Learner details from that organisation and provide information reasonably related to the training relationship, including registration, attendance, progress, assessment results, completion and certificate status. We will not provide unrelated personal data merely because the organisation paid for the Course.
The Corporate Customer is responsible for having a lawful basis to provide Learner data to us and for giving any information required by law. Learners should contact their organisation about its own use of reports received from NKO Training.

7. Who Receives Personal Data

We may disclose personal data, subject to appropriate controls, to:
  • Learning management, cloud-hosting and content-delivery providers;
  • Payment processors, banks and fraud-prevention providers;
  • Video-conferencing, scheduling, email, communications and support providers;
  • Analytics, survey, marketing and cookie-management providers where lawfully enabled;
  • Instructors, assessors, coordinators and authorised contractors who need the information to perform their role;
  • Corporate Customers and sponsors as described above;
  • Professional advisers, auditors, insurers and service providers subject to confidentiality obligations;
  • Courts, regulators, law-enforcement bodies and public authorities where required or permitted by law; and
  • A purchaser, investor or successor in connection with a genuine corporate transaction, subject to appropriate confidentiality and legal safeguards.
We do not sell personal data as a standalone commercial product.

8. LearnWorlds and Other Platform Providers

The NKO Training LMS may use LearnWorlds and related platform services. Depending on the service and data involved, the platform provider may process Learner personal data on NKO Training’s instructions under a data-processing agreement and may use authorised sub-processors. NKO Training will maintain appropriate contractual arrangements with platform and processor providers and describe material categories of providers in this Policy or a linked list where appropriate.
Third-party providers may publish their own privacy notices for activities they independently control. Learners should review those notices where a service redirects them to the provider or requires a separate provider account.

9. International Data Transfers

NKO Training, its Platform and service providers may process personal data in countries outside the individual’s country of residence, including outside the United Arab Emirates, European Economic Area or United Kingdom.
Where applicable law requires safeguards for a cross-border transfer, NKO Training will use an available lawful mechanism, which may include adequacy decisions, approved contractual clauses, binding contractual obligations, specific consent where legally appropriate, or another recognised mechanism. Information about relevant safeguards may be requested at booking@nkotraining.com, subject to confidentiality and security limitations.

10. Cookies and Similar Technologies

The Platform uses cookies, local storage, pixels and similar technologies for essential operation, security, preferences, analytics, communications and marketing. The Cookie Policy explains the categories and how choices can be managed.
Strictly necessary technologies may be used without optional consent where permitted because they are required for authentication, security, checkout, load balancing or delivery of a requested service. Non-essential analytics or advertising technologies will be used only in accordance with applicable consent requirements and recorded choices.

11. Marketing Communications

Operational messages about an account, payment, Course, schedule, assessment, certificate, security or legal matter are not marketing and may be sent where necessary to provide the Service or comply with law.
Marketing consent, where required, will be requested separately. You may unsubscribe through the message link or by contacting booking@nkotraining.com. We may retain a minimal suppression record to ensure that an opt-out is respected.

12. Course Recordings, Assessments and Communities

12.1 Recordings

Where NKO Training intends to record a live session, it will provide appropriate notice describing the purpose, information captured, access and retention. Where consent is required, it will be requested separately. Public promotional use of an identifiable person’s image, voice or testimonial will not be based solely on acceptance of general Terms.

12.2 Assessments and integrity controls

Assessment and attendance data may be processed to evaluate performance, issue certificates, prevent cheating, verify identity and maintain programme integrity. Where proctoring, biometric processing or another higher-risk technology is proposed, NKO Training will provide a specific notice and complete any assessment or consent process required by law before use.

12.3 Communities and shared spaces

Information posted in Course communities, chats or group discussions may be visible to instructors and other authorised participants. Do not disclose sensitive personal data, trade secrets or confidential employer or client information in shared spaces. NKO Training cannot control how another participant independently uses information that you choose to make visible, although participants are required to comply with the Terms of Service.

13. Children and Minors

The general Platform is not directed to children. We do not knowingly permit a person under 18 to purchase or independently create an account unless a Course is expressly suitable for minors and the necessary parent, guardian or organisational authorisation has been obtained. If you believe a minor has provided data without appropriate authority, contact booking@nkotraining.com.

14. Data Retention

We retain personal data only for as long as reasonably necessary for the purpose collected, including Course delivery, account administration, certification verification, legal compliance, tax and accounting, dispute handling, security and enforcement. Retention is determined by the nature and sensitivity of the data, purpose, legal requirements, potential claims and whether the data can be securely deleted or anonymised.
Record category Retention approach
Account and profile data For the active account period and a reasonable period after closure to manage reactivation, support, fraud and disputes.
Course progress, assessment and certificate records For the period reasonably necessary to deliver the Course, verify completion, support Corporate Customers and maintain certification integrity.
Transaction, invoice and tax records For the statutory period required by applicable accounting, tax and commercial law.
Support, complaints and legal correspondence For as long as needed to resolve the matter and for any applicable claim or limitation period.
Security and access logs For a proportionate period based on security, fraud-prevention and investigation needs.
Marketing data Until consent is withdrawn, an objection is made or the data is no longer useful, with a minimal suppression record retained where appropriate.
Recordings For the period stated in the relevant notice and no longer than reasonably necessary for the disclosed purpose.
At the end of the applicable period, data will be deleted, anonymised or securely retained where a legal hold or other lawful reason applies

15. Security

NKO Training uses appropriate technical and organisational measures designed to protect personal data against accidental or unlawful loss, alteration, disclosure, access or destruction. Measures may include access controls, authentication, encryption in transit, processor due diligence, contractual controls, backups, security logging, staff confidentiality and incident-response procedures.
No internet service, transmission method or storage system can be guaranteed completely secure. Users must protect credentials, devices and networks and notify NKO Training promptly of suspected compromise.
Where a personal-data breach occurs, NKO Training will investigate, mitigate and notify the competent authority and affected individuals where and within the timeframe required by law.

16. Your Privacy Rights

Depending on the law that applies and the circumstances, you may have rights to: 
  • Receive information about processing and obtain access to personal data;
  • Correct inaccurate or incomplete data;
  • Request deletion where there is no continuing lawful basis to retain the data;
  • Request restriction of certain processing;
  • Object to processing based on legitimate interests or to direct marketing;
  • Receive certain data in a structured, commonly used and machine-readable format;
  • Withdraw consent where processing is based on consent, without affecting earlier lawful processing;
  • Request review of certain solely automated decisions where applicable; and
  • Complain to a competent data-protection or regulatory authority.
To exercise a right, email booking@nkotraining.com with the subject line Data Protection Request and describe the request. We may request reasonable identity verification and may refuse or limit a request where permitted by law, including where it would adversely affect another person’s rights, compromise security or conflict with a legal obligation.

17. Automated Decision-Making

NKO Training does not intend to make decisions producing legal or similarly significant effects solely through automated processing without human involvement, unless the decision is necessary for a contract, authorised by law or based on explicit consent and appropriate safeguards are provided. Automated tools may be used for routine recommendations, fraud alerts, access controls or assessment support, subject to human review where appropriate.

18. Complaints

Please raise a privacy concern first with NKO Training at booking@nkotraining.com. We will investigate and respond within the period required by applicable law. You may also have a right to complain to the UAE Data Office or another competent supervisory authority, depending on the law that applies and the status of the relevant authority.

19. External Links

The Platform may link to third-party sites or services. NKO Training is not responsible for independent third-party privacy practices. Review the relevant privacy notice before providing personal data to an external service.

20. Changes to This Policy

We may update this Policy to reflect changes in Services, technology, providers, security practices or legal obligations. The current version and effective date will be posted on the Platform. Where a material change affects existing users, we may also provide an account or email notice where appropriate.

21. Contact Us

Privacy Contact
NKO Training FZE
Trade Licence No. 4429525.01
Licensed by Sharjah Publishing City Free Zone Authority
Business Centre, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates
Email: booking@nkotraining.com
Telephone: +971 52 401 1165